Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204844.roa
File: AS204844.roa (raw, json)
Hash identifier: M38MvxFg+g40papZQ2RzJf0Ma8xJICY1nlk70mmNAxk=
Subject key identifier: E2:25:74:68:82:48:2D:83:A4:50:CF:7D:D9:53:86:96:BF:CF:27:0D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 018F19F9AA23971B743794EB99DE520430C80D0C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204844.roa
Signing time: Wed 16 Oct 2024 03:03:15 +0000
ROA not before: Wed 16 Oct 2024 02:58:15 +0000
ROA not after: Wed 15 Oct 2025 03:03:15 +0000
asID: 204844
IP address blocks: 2a0f:85c1:8b7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:f9:aa:23:97:1b:74:37:94:eb:99:de:52:04:30:c8:0d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 16 02:58:15 2024 GMT
Not After : Oct 15 03:03:15 2025 GMT
Subject: CN=E225746882482D83A450CF7DD9538696BFCF270D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:e1:eb:c1:2b:74:b9:2c:88:91:8d:a5:94:
5b:bf:19:67:f6:16:3d:f4:d6:97:74:55:9a:aa:12:
6b:37:6d:05:96:89:7d:d8:b5:a3:9a:24:3f:72:d6:
48:ad:77:93:67:86:7f:d8:e6:ad:cd:f5:8f:49:f6:
04:14:a2:07:aa:7f:1e:53:4f:fa:77:ef:0d:19:ad:
ec:8c:98:15:7c:f1:15:73:41:72:f9:97:fe:42:99:
b8:7b:13:27:30:d6:4c:cc:d0:17:6e:1a:83:4a:a6:
a0:56:9d:fd:41:ca:fe:83:33:79:0a:dd:75:c0:63:
9a:dd:75:4a:87:9e:f4:2b:47:80:54:73:77:87:ac:
db:75:92:d5:e1:30:c7:69:bf:b6:54:b8:d2:3b:91:
79:cf:86:e5:fb:c9:7a:ab:f4:ec:92:5d:0c:52:fe:
5e:c8:36:6a:d2:c3:d0:9b:f7:f2:5a:37:5e:f2:5a:
43:e6:62:88:60:45:3c:b3:82:71:8c:83:0d:69:c4:
a8:1f:b8:f4:f5:34:e8:21:29:c1:71:a9:e5:a5:f8:
11:39:c9:19:57:6c:61:f3:66:c3:26:02:ba:c2:24:
29:31:96:90:40:92:f0:66:5a:46:ba:ad:e9:19:12:
a6:c5:43:7a:32:19:af:db:97:9d:91:10:d8:02:6d:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:25:74:68:82:48:2D:83:A4:50:CF:7D:D9:53:86:96:BF:CF:27:0D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8b7::/48
Signature Algorithm: sha256WithRSAEncryption
d2:ed:7f:80:4f:aa:2f:40:dc:36:ea:10:83:e7:59:5b:52:38:
ac:aa:f8:54:0d:55:46:6c:64:37:55:64:fc:ea:10:4f:25:ec:
73:e5:71:4b:03:18:16:c6:42:51:17:f8:03:3d:e8:59:23:17:
5d:a6:e3:7b:1c:34:5c:00:c5:4d:d6:83:28:ff:b4:62:48:7e:
32:f9:ba:3b:57:71:67:e8:67:27:71:16:43:8b:44:f5:ca:0c:
1d:0b:8f:92:cc:ff:03:34:ab:9d:4e:9c:6b:32:5c:d8:af:b5:
c8:e1:2e:b5:08:38:fa:9d:cb:8e:cb:14:a6:c3:33:fd:47:c6:
1f:cf:cf:d5:6f:c6:5e:cd:38:71:b2:81:e5:4e:5b:7f:8f:ec:
45:10:71:3e:57:f6:4e:12:d3:7c:ea:67:7d:19:a8:f4:c6:e1:
bb:fd:84:ab:54:50:73:c8:be:29:bb:c4:30:1e:5f:dc:f2:a4:
90:63:9d:38:80:00:92:99:b4:a6:a8:35:f5:da:f9:be:76:2e:
21:db:0c:35:a0:78:9c:bc:43:d6:d6:b2:20:93:0e:a8:be:ce:
b2:aa:23:8c:b2:0f:ef:c0:0b:36:3a:0a:d5:30:a7:5b:0e:54:
e6:d4:f7:10:e8:15:6e:a7:3c:1b:48:28:78:0e:b7:6a:58:93:
a1:2f:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org